en_US.ISO8859-1/relnotes/article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
	"../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../../share/xml/security.xml">
<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD: stable/11/release/doc/en_US.ISO8859-1/relnotes/article.xml 318454 2017-05-18 15:41:49Z gjb $</pubdate>

    <!-- Last rev: 288943 -->

    <copyright>
      <year>2017</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, according to the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
	<emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="security-errata">
    <title>Security and Errata</title>

    <para>This section lists the various Security Advisories and
      Errata Notices since &release.prev;.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      &security;
    </sect2>

    <sect2 xml:id="errata">
      <title>Errata Notices</title>

      &errata;
    </sect2>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para revision="313203">The &man.inetd.8; utility can now be
	built without <literal>libwrap</literal> support when
	<literal>WITHOUT_TCP_WRAPPERS</literal> is set in
	&man.src.conf.5;.</para>

      <para revision="316045">The &man.libthr.3; library and related
	files are now evaluated and removed by the
	<literal>delete-old-libs</literal> target when upgrading the
	system if <literal>WITHOUT_LIBTHR</literal> is
	set in &man.src.conf.5;.</para>

      <para revision="316423" contrib="sponsor" sponsor="&ff;">The
	<literal>WITH_LLD_AS_LD</literal> build knob has been added,
	which installs <application>LLD</application> as
	<filename>/usr/bin/ld</filename> if set.</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="308720" contrib="sponsor" sponsor="&gandi;">The
	&man.cron.8; utility has been updated to add support for
	including files within <filename
	  class="directory">/etc/cron.d</filename> and <filename
	  class="directory">/usr/local/etc/cron.d</filename> by
	default.</para>

      <para revision="308721" contrib="sponsor" sponsor="&gandi;">The
	&man.syslogd.8; utility has been updated to add the
	<literal>include</literal> keyword which allows specifying
	a directory containing configuration files to be included in
	addition to &man.syslog.conf.5;.  The default
	&man.syslog.conf.5; has been updated to include <filename
	  class="directory">/etc/syslog.d</filename> and <filename
	  class="directory">/usr/local/etc/syslog.d</filename> by
	default.</para>

      <para revision="308914">The &man.zfsbootcfg.8; utility has been
	added, providing one-time &man.nextboot.8; options for
	&man.zfsboot.8;.</para>

      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
	&man.setkey.8; utility has been modified to show the runtime
	<acronym>NAT-T</acronym> configuration.  The
	<literal>-g</literal> and <literal>-t</literal> flags have
	been added, which list only global and virtual policies,
	respectively when used with the <literal>-D</literal> and
	<literal>-P</literal> flags.</para>

      <para revision="316098" contrib="sponsor"
	sponsor="&dellemc;">The &man.getaddrinfo.1; utility has been
	added, ported from NetBSD.</para>

      <para revision="316944" contrib="sponsor"
	sponsor="&multiplay;">The &man.jail.8; utility has been
	updated to allow explicitly-assigned <acronym>IPv4</acronym>
	and <acronym>IPv6</acronym> addresses to be used within
	a jail.</para>

      <para revision="317855">The &man.daemon.8; utility has been
	updated to allow redirecting &man.stdout.4; and &man.stderr.4;
	output to &man.syslog.3; and to a file.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="307729">&man.unbound.8; has been updated to
	version 1.5.10.</para>

      <para revision="309511"><application>Subversion</application>
	has been updated to version 1.9.5.</para>

      <para revision="309847">&man.file.1; has been updated to version
	5.29.</para>

      <para revision="310490">The &man.amd.8; utility has been updated
	to version 6.2.</para>

      <para revision="312336">The <acronym>CLDR</acronym> locales have
	been updated to version 30.0.3.  The unicode locales have been
	updated to version 9.0.0.</para>

      <para revision="312517">&man.xz.1; has been updated to version
	5.2.3.</para>

      <para revision="313537">&man.tcpdump.1; has been updated to
	version 4.9.0.</para>

      <para revision="313795">&man.zlib.3; has been updated to version
	1.2.11.</para>

      <para revision="313980"><application>openresolv</application>
	has been updated to version 3.9.0.</para>

      <para revision="313680">The NetBSD test suite has been updated
	to the 01.11.2017_23.20 snapshot.</para>

      <para revision="314278"><literal>libucl</literal> has been
	updated to version 20170219.</para>

      <para revision="315432">&man.libarchive.3; has been updated to
	version 3.3.1.</para>

      <para revision="315995">&man.dma.8; has been updated to the
	2017-02-10 snapshot.</para>

      <para revision="316068">&man.ntpd.8; has been updated to version
	4.2.8p10.</para>

      <para revision="316303"><application>ACPICA</application> has
	been updated to version 20170303.</para>

      <para revision="316349">Timezone data files have been updated to
	version 2017b.</para>

      <para revision="316420">&man.mandoc.1; has been updated to
	version 1.14.</para>

      <para revision="316423"><application>Clang</application> has
	been updated to version 4.0.0.</para>

      <para revision="316423"><application>LLVM</application> has
	been updated to version 4.0.0.</para>

      <para revision="316423"><application>LLD</application> has
	been updated to version 4.0.0.</para>

      <para revision="316423"><application>LLDB</application> has
	been updated to version 4.0.0.</para>

      <para revision="316423"><application>compiler-rt</application>
	has been updated to version 4.0.0.</para>

      <para revision="316423"><application>libc++</application> has
	been updated to version 4.0.0.</para>

      <para revision="316957">&man.tcsh.1; has been updated to version
	6.20.00.</para>

      <para revision="318239" contrib="sponsor"
	sponsor="&ff;">&man.blacklistd.8; has been updated to the
	20170503 snapshot.</para>

      <para revision="318402" contrib="sponsor"
	sponsor="&ff;">&man.blacklistd.8; support for
	<application>OpenSSH</application> has been refined to adjust
	notification points to catch all authentication failures
	rather than authentication failures caused by invalid
	login usernames.</para>
    </sect2>

    <sect2 xml:id="userland-installer">
      <title>Installation and Configuration Tools</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="userland-rc">
      <title><filename class="directory">/etc/rc.d</filename>
	Scripts</title>

      <para revision="310009" contrib="sponsor"
	sponsor="&fisglobal;">The <literal>jail_confwarn</literal>
	&man.rc.conf.5; entry has been added, which suppresses warning
	about obsolete per-&man.jail.8; configurations.</para>
    </sect2>

    <sect2 xml:id="userland-periodic">
      <title><filename class="directory">/etc/periodic</filename>
	Scripts</title>

      <para revision="317857">The <filename>410.status-mfi</filename>
	&man.periodic.8; script has been added to monitor the status
	of &man.mfi.4; volumes.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para revision="317618" contrib="sponsor"
	sponsor="&dellemc;">The <function>clock_nanosleep()</function>
	system call has been added.  The
	<function>nanosleep()</function> system call is now a wrapper
	around <function>clock_nanosleep()</function>.</para>
    </sect2>

    <sect2 xml:id="userland-abi">
      <title>ABI Compatibility</title>

      <para revision="315274" contrib="sponsor"
	sponsor="&dellemc;">The
	<function>sem_clockwait_np()</function> library function has
	been added, which allows the caller to specify the reference
	clock and choose between absolute and relative mode.</para>

      <para revision="315282">The <application>clang</application>
	<literal>nullability</literal> attribute has been added to the
	<literal>C</literal> library headers.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-bugfix">
      <title>Kernel Bug Fixes</title>

      <para revision="316039">The &man.kvm.close.3; function has been
	updated to return the accumulated error from previous
	&man.close.2; calls.</para>

      <para revision="317434">The &man.ipf.4; packet filter has been
	updated to prevent &quot;keep state&quot; from incorrectly
	implying &quot;keep frags&quot;, matching the behavior
	documented in &man.ipf.5;.</para>
    </sect2>

    <sect2 xml:id="kernel-config">
      <title>Kernel Configuration</title>

      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
	<literal>IPSEC_NAT_T</literal> kernel configuration option has
	been removed.  Support for <acronym>NAT-T</acronym> is now
	enabled by default.</para>

      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
	<literal>IPSEC_FILTERTUNNEL</literal> kernel option has been
	removed, which was deprecated by the
	<literal>net.inet.ipsec.filtertunnel</literal> sysctl.</para>
    </sect2>

    <sect2 xml:id="kernel-modules">
      <title>Kernel Modules</title>

      <para revision="315514" contrib="sponsor" sponsor="&yandex;">The
	<literal>ipsec</literal> and <literal>tcpmd5</literal> kernel
	modules have been added.</para>

      <para revision="316274" contrib="sponsor" sponsor="&yandex;">The
	&man.ipfw.4; packet filter has been updated to add support for
	named dynamic states.</para>

      <para revision="316444" contrib="sponsor" sponsor="&yandex;">The
	<literal>ipfw_nptv6</literal> kernel module has been added,
	implementing Network Prefix Translation for
	<acronym>IPv6</acronym> as defined in <acronym>RFC</acronym>
	6296.</para>

      <para revision="316446" contrib="sponsor" sponsor="&yandex;">The
	<literal>ipfw_nat64</literal> kernel module has been added,
	implementing stateless and stateful
	<acronym>NAT64</acronym>.</para>

      <para revision="316660" contrib="sponsor" sponsor="&ff;">The
	&man.cfumass.4; device has been added, providing a storage
	frontend to <acronym>USB</acronym>
	<acronym>OTG</acronym>-capable hardware.</para>

      <para revision="317045" contrib="sponsor" sponsor="&yandex;">The
	<literal>ipfw_pmod</literal> kernel module has been added,
	designed for modifying packets of any protocol.</para>

      <note>
	<para>At present, only <acronym>TCP</acronym>
	  <acronym>MSS</acronym> modification is implemented.</para>
      </note>
    </sect2>

    <sect2 xml:id="kernel-sysctl">
      <title>System Tuning and Controls</title>

      <para revision="315539">The
	<literal>vfs.root_mount_always_wait</literal> tunable has been
	added, which forces the kernel to wait for root mount holds
	even if the root device is already present.</para>

      <para revision="316120" contrib="sponsor"
	sponsor="&dellemc;">When the system real time clock
	(<acronym>RTC</acronym>) is adjusted, such as by
	<function>clock_settime()</function>, sleeping threads are now
	awakened and absolute sleep times are reevaluated based on the
	new value of the RTC.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para revision="307768">The &man.jedec.ts.4; driver has been
	added, providing support for thermal sensors on memory
	modules.  The driver currently supports chips that are fully
	compliant with the <acronym>JEDEC</acronym>
	<acronym>JC</acronym> 42.4 specification.</para>

      <para revision="308104">The &man.chromebook.platform.4; driver
	has been added, providing support for various Chromebook
	models.</para>

      <para revision="308942">The &man.bytgpio.4; driver has been
	added, providing support for Intel&reg; Bay&nbsp;Trail&trade;
	SoC GPIO controllers.</para>

      <para revision="318357" contrib="sponsor"
	sponsor="&intelcorp;">The &man.ixl.4; driver has been updated
	to version 1.7.12-k.</para>
    </sect2>

    <sect2 xml:id="drivers-storage">
      <title>Storage Drivers</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="drivers-network">
      <title>Network Drivers</title>

      <para revision="309377" contrib="sponsor"
	sponsor="&broadcom;">The &man.bnxt.4; driver has been added,
	providing support for Broadcom&reg; NetXtreme-C&trade; and
	NetXtreme-E&trade; devices.</para>

      <para revision="317116">The &man.qlnxe.4; driver has been added,
	providing support for Cavium&reg; Qlogic&trade; 45000 Series
	adapters.</para>

      <para revision="317182">The &man.qlxgbe.4; firmware has been
	updated to version 5.4.64.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="hardware">
    <title>Hardware Support</title>

    <para>This section covers general hardware support for physical
      machines, hypervisors, and virtualization environments, as well
      as hardware changes and updates that do not otherwise fit in
      other sections of this document.</para>

    <sect2 xml:id="hardware-support">
      <title>Hardware Support</title>

      <para>The &man.cloudabi.4; driver has been updated to allow
	running 32-bit binaries within 64-bit userland environments
	when the kernel configuration file has the
	<literal>COMPAT_CLOUDABI32</literal> option present.</para>
    </sect2>

    <sect2 xml:id="hardware-virtualization">
      <title>Virtualization Support</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="hardware-arm">
      <title>ARM Support</title>

      <para revision="305436">Support for the Allwinner A13 board has
	been added.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="storage-net">
      <title>Networked Storage</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="storage-zfs">
      <title>ZFS</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="storage-geom">
      <title>&man.geom.4;</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para revision="307632" contrib="sponsor" sponsor="&gandi;">The
	<acronym>EFI</acronym> loader has been updated to support
	<acronym>TFTPFS</acronym>, providing netboot support without
	requiring an <acronym>NFS</acronym> server.</para>
    </sect2>

    <sect2 xml:id="boot-menu">
      <title>Boot Menu Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-general">
      <title>General Network Changes</title>

      <para revision="311681" contrib="sponsor" sponsor="&yandex;">The
	network stack has been updated to include
	<function>ip6_tryforward()</function>, providing performance
	benefits as result of a reduced number of checks.</para>

      <para revision="313523" contrib="sponsor"
	sponsor="&dellemc;">The network stack has been modified to fix
	incorrect or invalid <acronym>IP</acronym> addresses if
	multiple threads emit a <acronym>UDP</acronym>
	<literal>log_in_vein</literal> message concurrently.</para>

      <para revision="317386" contrib="sponsor"
	sponsor="&multiplay;">The <acronym>TCP</acronym> stack has
	been changed to use the estimated <acronym>RTT</acronym>
	instead of timestamps for receive buffer auto resizing.</para>
    </sect2>

    <sect2 xml:id="network-protocols">
      <title>Network Protocols</title>

      <para revision="309337" contrib="sponsor"
	sponsor="&dellemc;">Support for <acronym>GARP</acronym>
	retransmit has been added.  A new &man.sysctl.8;,
	<literal>net.link.ether.inet.garp_rexmit_count</literal>, has
	been added, which sets the maximum number of retransmissions
	when set to a non-zero value.</para>

      <para revision="315514" contrib="sponsor"
	sponsor="&yandex;">Support for the
	<literal>UDP_ENCAP_ESPINUDP_NON_IKE</literal> encapsulation
	type has been removed.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="ports">
    <title>Ports Collection and Package Infrastructure</title>

    <para>This section covers changes to the &os;&nbsp;Ports
      Collection, package infrastructure, and package maintenance and
      installation tools.</para>

    <sect2 xml:id="ports-infrastructure">
      <title>Infrastructure Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="ports-packages ">
      <title>Packaging Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="doc">
    <title>Documentation</title>

    <para>This section covers changes to the &os;&nbsp;Documentation
      Project sources and toolchain.</para>

    <sect2 xml:id="doc-sources">
      <title>Documentation Source Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="doc-toolchain">
      <title>Documentation Toolchain Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="releng">
    <title>Release Engineering and Integration</title>

    <para>This section convers changes that are specific to the
      &os;&nbsp;Release Engineering processes.</para>

    <sect2 xml:id="releng-changes">
      <title>Integration Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>
</article>